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TNTHE CLAIMS; 

This listing of claims will replace all prior versions, and Ustings, of claims in the application: 
Listing of Claiimr 

1 (Withdrawn) A method for communicating a transaction between an originating 
computer and a destination computer, the method comprising the steps of 

processing ti ansaction data from an application suite at the originating computer; 
generating standardized data transactions based on predefined definitions; 
sending the standardized transaction data from the originating computer to the 

destination computf^; 

receiving the standardized transaction data by the destination computer; 

generating transaction data based on the attributes of the destination computer and 
storing the transaction data at the destination computer, and, 

processing the transaction data by a target application suite at the destination 
computer. 

2. (Withdrawn) The method for conununicating a transaction as in claim 1 , wherein 
the generating transaction <lata step comprises converting the transaction data from its original 
format to a standardized format. 
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3. (WitHdrawn) The method for communicating a transaction as in claim 2. wherein 
the generating transaction data step converts the data from the standardized format to a format 
readable by the target application suite. 

4. (Withdrawn) The method for communicating a transaction as in claim 1, the 
generating standardized data transactions comprising creating unique encryption keys for 
encoding and decoding transaction data. 

5. (Withdrawn) A system for communicating a transaction between an originating 
computer, llie originating computer comprising a computer usable medium having computer 
readable instruction code means stored therein, and a destination computer, the destination 
computer comprising a computer usable medium having computer readable instmction code 
means stored therein, the system comprising the steps of 

computer readable instruction code means for processing transaction data from an 
application suite at the originating computer; 

computer readable instruction code means for generating standardized data 
transactions based on predefined definitions; 

computer readable instmction code means for sending the standardized 
transaction data from the originating computer to the destination computer, 

computer readable instrucfion code means for receiving the standardized 
transaction data by the destination computer, 
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computer readable instruction code means for generating transaction data based 
on the attributes of the destination computer and storing the transaction data at the 

destination computeri and, 

computer readable instruction code means for processing the transaction data by a 
target application suite at the destination computer. 

6. (Original) A method for exchanging data between an initiator and a responded 

the steps comprising: 

sending a session request package from the initiator to tlie responder, 
sending a session confirm from the responder to the initiator; 
sending a key request from the initiator to the responder; 
confirming the initiator's key request has been encoded correctly by the 
responder; 

sending a key confirm fi-om the responder to the initiator; 
confirming the responder*$ key confirm has been encoded correctly by the 
initiator; 

sending a diita package by the initiator to the responder; 
replying with a package confirm by the responder to the initiator; and, 
repealing the sending a data package step and replying step until the initiator 
sends an end request 
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7 (Original) The method for exchanging data between an initiator and a responder 
as in claim 6, wherein the session request package comprises the initiator's IP address and profile 
data. 

8. (Original) The method for exchanging .data between an initiator and a responder 
as in claim 7, wherein the session confirm step comprises the step of generatmg a new session 
key pair having a respondei-'s public session key. 

9. (Original) The method for exchanging data between an initiator and a responder 
35 in claim 6, wherein the session confirm comprises: 

the session key pair; 

the responder*s public session key; 

the responder' s profile data. 

1 0. (Original) The method for exchanging data between an initiator and a responder 
as in claim 6, the key request comprises: 

the initiator's public session key; 
the initiator's profile data. 
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1 1 (Original) The method for exchanging data between an initiator and a responder 
claim 10, wherein the session confinn comprises the responder's public session key. 



as in 



as m 



12. (Original) The method for exchanging data between an initiator and a responder 
claim 11. wherein the key request is encoded with the responder's pubUc session key. 



1 3. (Original) The method for exchanging data between an initiator and a responder 
as in claim 6, wherein the confirming the initiator's key request step comprises: 

decoding the key request; and, 

verifying the key request is properly formatted. 

14. (Original) The method for exchanging date between an initiator and a responder 
as in claim 6, wherein the confirming the responder's key confirm step comprises: 

decoding the key confinn, and 

verifying the key confirm is properly formatted, 

15. (Original) The method for exchanging data between an initiator and a responder 
as in claim 6, wherein the sending a data package steps further comprises converting the data 
from its original format to a standardized format. 
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16. (Original) The method for exchanging data between an initiator and a responder 
as in claim 1 5. wherein the replying step further comFises converting the data from the 
standardized format to a format used by the responder. 

17. (Original) The method for exchanging data between an initiator and a responder 
as in claim 15, wherein the standardized format is EDI. 

18. (Original) A system for exchanging data between an initiator computer and a 
responder computer, the initiator computer comprising a computer usable medium having 
computer readable instruction code means stored therein, and the responder computer 
comprising a computer usable medium having computer readable instruction code means stored 
therein, the system comprising the steps of: 

computer readable instruction code means for sending a session request package 

from the initiator to the responder; 

computer readable instruction code means for sending a session confirm from the 

responder to the initiator; 

computer readable instruction code means for sending a key request fixjm the 

initiator to the responder; 

computer readable instruction code means for confirming the initiator's key 

request has been encoded correctly by the responder; 
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computer readable instruction code means for sending a key confirm from the 

responder to the initiator; 

computer readable instruction code means for confirming the responder's key 

confirm has been encoded correctly by the initiator; 

computer readable instruction code means for confirming the responder's key 
confirm has been encoded correctly by the initiator; 

computer readable instruction code means for sending a data package by the 

initiator to the responder, 

computer readable instruction code means for replying with a package confirm by 

the responder to the initiator; and, 

repeating the sending a data package step and replying step until the initiator 

sends an end request. 

1 9. (Original) A system for exchanging data between an initiator computer and a 
responder computer as in claim 1 8, wherein the session request package comprises the initiator's 
IP address and profile data, 

20. (Original) A system for exchanging data between an initiator computer and a 
responder computer as in claim 18. wherein the session confirm step fiirther comprises computer 
readable instruction code means for generating a new session key pair liaving a responder's 
public session key, 
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21 . (Original) A. system for exchanging data between an initiator computer and a 
responder computer as in claim 20, wherein the session confirm comprises: 

the session key pair; 

the responder's pubhc session key; and, 

the responder's profile data. 

22. (Original) A system for exchanging data between an initiator computer and a 
responder computer as in claim 1 8, the key request comprises: 

the initiator''s public session key; and, 
the initiator's profile data. 

23. (Original) A system for exchanging data between an initiator computer and a 
responder computer, as in claim 18, wherein the session confirm comprises the responder's 
public session key. 

24. (Original) The method for exchanging data between an initiator and a responder 
as in claim 18, wherein the key request is encoded with the responder's public session key. 

25. (Original) A system for exchanging data between an initiator computer and a 
responder computer as in claim 1 8, wherein the system further comprising;. 
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computer readable instruction code means for decoding the key request; and, 
computer readable instruction code means for verifying the key request is properly 
formatted. 

26. (Original) A system for exchanging data between an initiator computer and a 
rcspondet computer as in claim 18. wherein the system further comprising; 

computer readable instruction code means for decoding the key confirm; and, 
computer readable instruction code means for verifying the key confirm is 
properly formatted. 

27. (Original) A method for exchanging data between an initiator and a responder, the 

initiator steps comprising; 

sending a session request package; 
receiving a session confimi; 
sending a key request; 
receiving a key confirm; 

confirming the key confirm ha$ been encoded correctly; 
sending a data package; 
receiving a package confinn; and, 
sending a session end request. 
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28 (Original) The method for exchanging data between an initiator and a responder 
as in claim 27, wherein the session request package comprises the initiator's IP address, and 
profile data. 

29 (Original) The method for exchanging data between an initiator and a responder 
as in claim 27, wherein the session confirm step further comprises the initiator receiving a 
session key pair and a responder's public session key. 

30; (Original) The method for exchanging data between an initiator and a responder 
as in claim 29, wherein the session confirm comprises: 
the session key pair; 
the responder' s public session key; 
the respondCT's profile data. 

3 1 . (Original) The method for exchanging data between an initiator and a responder 
as in claim 27, the key request comprises: 

the initiator's public session key; 
the initiator's profile data. 

32. (Original) The method for exchanging data between an initiator and a responder 
as in claim 31, wherein the session confirm further comprises the responder's public session key. 
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33. (Original) The method for exchanging data between an initiator and a responder 
claim 32, wherein the key request is encoded with the responder's public session key. 



34. (Original) The method for exchanging data between an initiator and a responder 
as in claim 33, the confirming the key confirm has been encoded correctly step further 
comprising: 

decoding the key confirm with the responder's pubUc session key; 
verifying the key confirm has been formatted correctly. 

35. (Original) A computer usable medium having computer readable instruction code 
means stored therein for enabling a computer to exchange transactions with a separate computer, 
comprising: 

computer readable instruction code means for causing the computer to send a 
session request package; 

computer readable instruction code means for causing the computer to receive a 

session confirm; 

computer readable instaiction code means for causing the computer to send a key 
request; 

computer readable instruction code means for causing the computer to receive a 
key confirm; 
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cotnputer readable instruction code means for confirming the key coTifiim has 
been encoded correctly; 

computer readable instruction code means for causing the computer to send a data 
package; 

computer nsadable instruction code means for causing the computer to receive a 
package confirm; and> 

computer readable instruction code means for causing the computer to send a 
session end request. 

36. (Original) The computer usable medium as in claim 35, wherein the session 
request package comprises an IP address and profile data, 

37. (Original) The computer usable medium as in claim 35, wherein the session 
confirm further comprises a public session key, 

39. (Original) The computer usable medium as in claim 35, wherein the session 
confirm comprises: 

a session key pair; 

a pubhc session key; and 

a profile data. 
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40. (Original) The computer usable inedium as in claim 35, the key request 
comprises: 

a public session key for the separate computer, 
a profile for the separate computer. 

41 . (Original) The computer usable medium as in claim 35, further comprising 
computer readable instruction code means for decoding the key request with the public session 
key. 

42. (Original) The computer usable medium as in claim 35, the computer readable 
instruction code means for confirming the key confirm has been encoded correctly further 
comprising: 

computer readable Lristruction code means for decoding the key confirm; and 
computer readable instruction code means for verifying the key confirm is property 
formatted 

43. (Original) A method for exchanging data between an initiator and a responder, the 
responder steps comprising: 

receiving a session request package; 
sending a session confirm; 
receiving a key request; 
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confinning the initiator's key request has been encoded correctly; 

sending a key confirm; 

receiving a data package; 

replying with a package confirm; and, 

repeating the receiving a data package step and replying step until receiving an 
end session request. 

44. (Original) llie method for exchanging data between an initiator and a responder 
as in claim 43. wherein the session request package comprises the initiator's IP address and 
profile data. 

45. (Original) The method for exchanging data between an initiator and a responder 
as in claim 43, wherein the session confirm step comprises the step of generating a new session 
key pair having a public session key, 

46. (Original) The method for exchanging data between an initiator and a responder 
as in claim 43, wherein the session confirm comprises: 

the session key pair; 
the public session key; 
a profile data. 



812823_I 

-15- 



PAGE ie/33 ' RCVD AT 1218/2004 3:58:20 PM [Eastern Standard Time] ' SVR:USPT0-EFXRF-1I2 ' DNIS:8729306 ' CSID:216 592 5009 ' DURATION (nifn^s):07-02 



* D^C 08 2004 16: K FR TUCKER ELLIS WEST LLP216 592 5009 TO 917038729306 P. 17/33 



Appl No. 09/836,894 

Response dated December 8, 2004 

Reply to Office Action of October 18, 2004 

47. (Original) The method for exchanging data between an initiator and a responder 
as in claim 43, the key request comprises: 

the initiator's public session key; and, 
the initiator's profile data, 

48. (Original) The method for exchanging data between an initiator and a responder 
as in claim 43, wherein the session confirm further comprises the public session key. 

49. (Original) The method for exchanging data between an initiator and a responder 
as in claim 48, wherein the key request is encoded with the public session key. 

50. (Original) The method for exchanging data between an initiator and a responder 
as in claim 43, wherein the confirming step comprises; 

decoding the key request; and, 

verifying the key request is properiy formatted. 

5 1 . (Original) A computer usable medium having computer readable instruction code 
means stored therein for enabling a computer to exchange transactions with a separate computer, 
comprising: 

computer readable instruction code means for causing the computer to receive a 
session request package from an initiator; 
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computer readable instruction code means for causing the computer to send a 
session confirm; 

computer readable instruction code means for causing the computer to receive a 
key request; 

computer rciadable instruction code means for causing the computer to confirm the 
key request has been encoded correctly; 

computer readable instruction code means for causing the computer to send a key 

confirm; 

computer readable instruction code means for causing the computer to receive a 
data package; 

computer njadable instruction code means for causing the computer to reply with 

a package confirm; and, 

computer nsadable instruction code means for causing the computer to receiving 
data packages and reply with package confums until the computer receives an end session 
request. 

52- (Original) The computer useable medium as in claim 5 1 , wherein the session 
request package comprises the initiator's IP address and profile data. 
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53. (Original) The computer usable medium as in claim 5 1 , further comprising 
computer readable instruction code means for causing the computer to generate a new session 
key pair having a public session key. 

54. (Original) The computer useable medium as in claim 53, wherein the session 

confirm comprises: 

the session key pair; 
the public session key; 
a profile data. 

55. (Original) The computer useable medium as in claim 54, the key request 
comprises: 

the initiator's public session key; 
the initiator's profile data, 

36, (Original) The computer useable medium as in claim 55, wherein the session 
confirm further comprises the public session key. 

57. (Original) The computer useable medium as in claim 56, wherein the key request 
is encoded with the public session key. 
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58. (Original) The computer useable medium as in claim 51, wherein the confirming 

step comprises: 

decoding the key request; and, 

verifying the key request is properly formatted. 

59. (Previously Amended) A system for exchanging data, comprising 

a) a third party server; 

b) a web host server; 

c) a cojimierce server having a trading partner profile table; 

d) a first network connecting the customer computer, web host server and 
commerce server; 

e) an applications server connected to the commerce server by a second 
network, the applications server responsive to remote procedure calls from tlie commerce 
server. 

60. (Withdrawn) The system for exchanging data as in claim 59, wherein the first 
network comprises a plurality of segments. 

61. (Withdrawn) The system for exchanging data as in claim 60, wherein at least one 
segment of the first network is selected from the group consisting of wireless, fiber optic, 
infrared, a hand held computer, and a voice recognition device. 
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62. (Withdrawn) The system for exchanging data as in claim 59. wherein the second 
network comprises a plurality of segments. 

63. (Withdrawn) The system for exchanging data as in claim 62, wherein at least one 
segment of the second network is selected from the group consisting of wireless, fiber optic, 
infrared, a hand held computer, and a voice recognition device. 

64. (Withdrawn) The system for exchanging data as in claim 63, wherein the initiator 
further comprises a web browser. 

65 . (Withdrawn) A method for exchanging data, comprising; 

a) an initiator who initiates the transaction, the transaction including data, 
selected from the group consisting of an application server, a third party server, a web 
host server, and a commerce server; 

b) a reisponder which receives the transaction selected from the group 
consisting of the application server, the third party server, the web host server, and the 
commerce server; 

c) a point to point secure transfer protocol using high level encryption for 
sending and receiving the transaction, the protocol comprising; 



812823_1 

-20- 



PAGE 21/33 « RCVD AT 12/8/2004 3:58:20 PM [Eastern Standard Time] ' SVR:USPT0-EFXRM/2 ' DNIS:8729306 * CSID:216 592 5009 * DURATION (fnin-ss):07^l2 



' DEC .08 2004 16: 0S FR TUCKER ELLIS UEST LLP216 592 5009 TO 917038729306 P. 22/33 



Appl. No, 09/836,894 

Response dated December 8, 2004 

Reply to Office Action of October 18, 2004 



1) computer readable instruction code means for establishing an active 

listener via an event wait state; 

2) computer readable instruction code means for accessing the trading 
partner profile table and determining tiie identity of the initiator, what transactions 
the initiator and responder have mutually agreed to allow, determine a location 
and format of data for the transaction and determine allowable values; 

3) computer readable instruction code means for generating a security 
error and terminating the code if the initiator is not authorized; 

4) computer readable instruction code means for writing activity to an 

activity log; 

5) computer readable instruction code means for determining and 
processing m event state, the event state selected from the group consisting of 
idle, session request, session confirm, key request, key confirm, data package, 
next data package, package confinn, end request, and end confirm; 

6) estabhshing a business conversation between trading paitaers. the 
business conversation comprised of specific time or event driven transaction sets; 

7) computer readable instruction code means for building a header 
and cargo appropriate for the event state; 

8) computer readable instruction code means for generating a imique 
encryption key pair for each transmission; 
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9) computer readable instructions for compressing and encrypting the 
data using the unique encryption key pair; 

1 0) computer readable instruction means for sending the data to the 
responder that prevents the data from being stored on a server hard drive while the 
data is in transit between the initiator and responder; 

1 1 ) computer readable instruction code means for receiving, decrypting 

and decompressing the data. 

66. (Withdrawn) The method for exchanging data as in claim 65. wherein the data 
comprises at least one of the group consisting of text., binary objects, image, a sound recording, a 
data stream, EDI, XML, and EDIFACT. 

67. (Withdrawn) The method for exchanging data as in claim 65. wherein a unique 
signature key generated on the hosting system is derived from apassphrase generated from user 
input and unique system identifiers facilitating non-repudiation. 

68. (Withdrawn) The method for exchanging data as in claim 65, wherein sharing of 
public keys is directly between trading partners only and used during a single session only. 
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69. (Withdrawn) The method for exchanging data as in claim 65, wherein the 
initiator's and respooder>s public keys are uniquely created by the insertion of string values into 
randomly chosen positions. 

70. (Withdrawn) The method for exchanging data as in claim 65. wherein bi- 
directional verification of sender and recipient identities is accomplished prior to any exchange 
of data. 

71. (Withdrawn) The method for exchanging data as in claim 65, wherein separate 
exchanges of public signature keys, used for trading partner validation, and public exchange 
keys, used for encoding/decoding of data, are facilitated. 

72. (Withdrawn) The method for exchanging data as in claim 65, wherein the 
initiator maintains full control of data provided to validated partners. 

73. (Withdrawn) The method for exchanging data as in claim 65, wherein an entire 
data package is encoded prior to transmission. 

74. (Withdrawn) The method for exchanging data as in claim 65, wherein data 
receipt by the intended recipient is verified. 
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75. (Withdrawn) A queue based method for initiating and managitig a business 
conversation, wherein an inbound transmission originates from the group consisting of a web 
host and a third party server, the business conversation comprising at least one transaction and 
comprising a commerce server, the commerce server comprising a trading partner profile table, a 
transaction engine queue, a reply requirements queue, a transaction engine outbound queue, a 
SDS transaction queue, and a transport protocol outbound queue, the commerce server being 
communicatively coupled by a first network to at least one of a web host server and a third party 
server, and the commerce server being communicatively coupled by a second network to an 

application server, the steps comprising: 

a) receiving an inbound request, determining the initiator and responded 
decode and decompress the request, determine the output destination and adding 
to the transaction engine queue; 

b) parsing the inbound transmission into at least one transaction, authorizing 
the initiator, preparing a data structure for each transaction and returning the 
transaction to the transaction engine queue; 

c) building and managing the business conversation by utilizing the business 
transaction map and forwarding the transactions to the appropriate queue selected 
from the reply requirements queue, the transport protocol outbound queue and the 
SDS transaction queue; 
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76. (Withdrawn) The queue based method for initiating a business conversation 
according to claim 75 wherein the inbound transmission is received from the group consisting of 
the web host server and third party server communicatively coupled to the first network. 

77. (Withdrawn) Hie queue based method for initiating a business conversation 
ording to claim 75 wherein the final destination of the transaction is the application server. 



acci 



78. (Withdrawn) The queue based method for initiating a business conversation 
according to claim 75 wherein step (c) further comprises building and managing at least one 
future conversational transaction and forwarding the future transaction to the reply requirements 
queue. 

79. (Withdrawn) The queue based method for initiating a business conversation 
according to claim 75 wherein step (c) further comprises sending an outbound transaction to the 
transport protocol outbound queue. 

80. (Withdrawn) The queue based method for initiating a business conversation 
according to claim 75 wherein step (c) further comprises sending the transaction from the SDS 
transaction queue to its final destination, the application server. 
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8 1 (Withdrawn) A queue based method for initiating and managing a business 
conversation, wherein an outbound transmission originates from an applications server, the 
business conversation comprising at least one transaction and comprising a commerce server, the 
commerce server comprising a trading partner profile table, a transaction engine queue, a reply 
requirements queue, a transaction engine ombound queue, a SDS transaction queue, and a 
transport protocol outbound queue, the commerce server being communicatively coupled by a 
first network to at least one of a web host server and a third party server, and the commerce 
server being communicatively coupled by a second network to an application server, the steps 
comprising: 

a) receiving an outbound transaction, reading, parsing and fomaatting of the 
transaction imd adding to the transaction engine outbound queue; 

b) parsing of transaction to the recipients pre-deteimined format based on the 
overall database structure map; 

c) determining the recipient of at least one transaction, building the outbound 
transaction and forwarding to the transaction engine queue; 

d) building and managing of at least one future conversational transaction 
and forwarding the fiitare transaction to the reply requirements queue; 

e) compressing, logging and encoding the outbound transaction; 

f) transmission of the transaction to it's final destination. 
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82, (Withdrawn) The queue based method for sending an outbound 
transmission of a busxness conversation according to claim 81 wherein the final destination of the 
outbound transmission is selected from the group of the web host server and third party server on 
the first network. 
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